Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c93aed40-38a1-439a-aa01-54e548e05e54.roa
File: c93aed40-38a1-439a-aa01-54e548e05e54.roa (raw, json)
Hash identifier: fuygYavAJU7tojNWtOqrsJEHj5sbBIP1q6lYAAsbJ2s=
Subject key identifier: EA:7D:40:8A:74:FF:FB:E6:05:FB:98:BF:84:76:E5:E8:69:8D:E2:87
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 252C2143632F89427046D8BBE0D3683D5D3ADFF2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c93aed40-38a1-439a-aa01-54e548e05e54.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:2c:21:43:63:2f:89:42:70:46:d8:bb:e0:d3:68:3d:5d:3a:df:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=39da0d4fcbf3c807ac5d623de7b3635e26440ec63fbddfe820962194f2158413, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:90:41:10:24:8e:f1:86:3e:f2:67:57:38:
0a:a1:b6:11:63:7c:ac:b2:3b:f1:44:a4:31:d2:4f:
3a:6f:63:97:83:64:6d:82:90:07:09:e7:39:de:ad:
8e:cf:10:5d:08:18:cd:fe:c2:55:a6:f0:c2:41:45:
cc:a1:91:e3:72:a5:1e:ab:52:86:e1:83:f1:7c:35:
f2:d4:e0:79:e6:5c:55:a9:f2:37:e7:9b:58:c4:4a:
b6:da:68:70:2a:14:be:81:04:06:d7:0e:88:06:79:
41:07:26:0b:a0:07:c8:dc:b8:70:4f:97:6c:40:c8:
10:e7:1f:b9:ca:c4:d3:2b:dd:ea:fb:b6:28:8f:82:
9b:71:d1:87:a9:aa:5f:7e:1e:96:b3:2e:3d:01:ba:
bb:c3:96:25:e5:3e:20:32:81:51:93:05:1a:4c:84:
17:b6:c0:6c:1e:dc:c1:a7:aa:f5:f0:6f:83:d2:da:
07:7d:a4:79:59:03:82:a5:55:14:aa:69:27:f5:38:
96:7e:85:6c:0c:51:81:30:b4:d7:35:67:af:93:8b:
63:fb:85:3d:4b:53:e2:16:56:40:bf:ef:f8:8c:db:
c7:ff:12:a6:a5:25:56:4a:24:42:6e:a8:43:e6:64:
f4:c8:5f:24:30:a4:b6:4a:ba:09:55:46:78:66:9c:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7D:40:8A:74:FF:FB:E6:05:FB:98:BF:84:76:E5:E8:69:8D:E2:87
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c93aed40-38a1-439a-aa01-54e548e05e54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.147.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c7:41:40:cc:0c:da:0a:e9:28:1a:93:4d:50:72:36:05:82:
d6:5c:5f:d9:d2:77:88:13:ed:8b:ad:78:63:81:0f:ea:ba:37:
7c:49:c2:26:20:51:63:77:e7:eb:c1:3b:93:a2:2b:8f:ab:6a:
25:fd:04:10:37:11:cd:35:97:30:c5:da:d4:7b:ed:a8:12:bb:
21:dc:35:67:33:be:e0:88:da:ce:b1:db:4b:62:ed:18:84:04:
9e:bb:0d:e7:1d:d8:8e:37:2f:29:0f:9a:01:83:68:a7:6c:34:
75:b8:61:7d:3d:aa:ca:68:6f:bc:49:a0:a8:7f:56:5e:90:35:
ba:15:ff:e4:66:da:91:50:b7:bf:46:5f:22:25:5c:97:45:1f:
5b:62:ca:9d:33:d1:24:2a:56:ad:71:ca:72:da:cd:ec:01:1c:
e7:41:53:48:95:18:8e:36:82:69:57:d3:44:fa:83:07:47:67:
54:09:b0:cf:88:27:49:ba:ac:63:94:f1:98:bd:ac:7c:b2:a7:
c3:bc:b8:50:9a:2f:9b:0a:aa:65:ed:dc:92:95:d2:0f:cd:0f:
e4:41:6b:e6:a8:f5:fb:0a:44:ff:a2:71:8b:b3:b8:b4:9b:e8:
b0:fb:1a:d6:63:d2:b4:32:2d:25:66:4d:48:2a:fc:3d:ac:b3:
0e:13:47:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:17:22 2025 by rpki-client